Security Essentials

by Microsoft

Take action — actively targeted

Security Essentials is actively targeted by attackers. A significant proportion of its known vulnerabilities are being exploited.

What to do
  1. Apply all available updates immediately
  2. Review your exposure — is this internet-facing?
  3. Monitor vendor advisories for this product

What Attackers Target

Vulnerabilities with high exploit probability 28.6%
Confirmed actively exploited (CISA) 14.3%
Public exploit code available 42.9%
Based on 14 known vulnerabilities. Percentages show the proportion that are actively dangerous — a low percentage means most vulnerabilities in this product are not being exploited.

Most Dangerous Vulnerabilities

CVE CVSS Exploit Probability Confirmed
CVE-2017-8540 7.8 84.6% Yes
CVE-2021-1647 7.8 77.4% Yes
CVE-2018-0986 8.8 75.4%
CVE-2017-8558 7.8 57.8%
CVE-2019-1255 7.5 9.1%
CVE-2017-8536 5.5 5.0%
CVE-2017-8537 5.5 5.0%
CVE-2017-8535 5.5 5.0%
CVE-2019-1161 7.1 0.6%
CVE-2021-24092 7.8 0.4%
CVE-2020-1002 7.1 0.3%
CVE-2020-1163 7.8 0.2%
CVE-2020-1461 7.1 0.2%
CVE-2020-1170 7.8 0.2%
61
/ 100
high-risk
Active Threat 23/50 · Moderate
Exploit Availability 38/50 · High

Score uses Wilson score intervals to account for sample size. Products with few CVEs are scored conservatively.